Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: WTZ6FCBV+jWucdgku47UOEEsbtMseT7QUj5dN67Xzyw=
Subject key identifier: 2D:E5:7D:8E:4A:11:EA:A1:A5:76:8C:F1:39:86:C8:B8:F2:54:32:C6
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 01976CCF804B57750BDCDC91E71F3AB141E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 0DF5
Signing time: Sat 14 Jun 2025 05:00:27 +0000
Manifest this update: Sat 14 Jun 2025 05:00:27 +0000
Manifest next update: Sun 15 Jun 2025 05:00:27 +0000
Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=)
2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=)
3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: gevjPxylGOkxxNgZT8mGVFL4W2f8HAdpBFqo0aPU5V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:80:4b:57:75:0b:dc:dc:91:e7:1f:3a:b1:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jun 14 05:00:27 2025 GMT
Not After : Jun 15 05:00:27 2025 GMT
Subject: CN=2de57d8e4a11eaa1a5768cf13986c8b8f25432c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:51:88:ea:39:67:3f:96:81:66:07:92:ec:
6f:bf:91:cf:8b:2c:a6:70:3d:8e:e2:12:95:7e:16:
8c:f8:4e:c1:74:c5:e8:f9:9d:59:76:3f:e6:46:1a:
36:b8:e4:13:25:be:f6:88:13:ef:12:3d:a1:a4:8b:
42:d0:57:58:5b:af:10:cc:0e:be:57:c6:4c:18:a2:
f3:92:00:31:16:43:d6:25:9f:05:8d:4e:fc:31:7a:
c3:76:a0:b7:59:e5:bf:62:ef:1b:2e:71:6c:2a:8f:
f0:df:6b:ce:f4:cf:7c:c3:2b:39:59:4d:5c:78:70:
23:ee:b6:d2:4d:aa:e0:1d:00:08:9f:ee:15:98:37:
ec:04:b7:6c:8b:84:69:3c:53:67:9a:22:34:e0:03:
00:14:1f:48:70:96:99:fa:75:76:4a:96:2e:99:f6:
91:ee:cc:7c:3e:38:10:ec:49:f2:f8:e1:b8:11:b8:
6c:a6:4e:9a:81:61:73:de:df:55:26:55:ee:f6:81:
4a:19:c8:9b:c4:5d:5f:c9:b6:1a:6d:ed:81:cb:a2:
63:a1:d3:a1:5e:67:85:33:55:b8:7b:01:0d:dd:a2:
61:bd:ea:01:88:5f:8f:24:39:56:a8:ad:6b:aa:f9:
70:a0:77:59:bb:d2:f4:ee:4b:00:72:8a:b8:c0:66:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:7D:8E:4A:11:EA:A1:A5:76:8C:F1:39:86:C8:B8:F2:54:32:C6
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:71:4a:9e:04:69:42:95:7a:63:b3:f3:d7:66:4c:3e:4f:21:
4c:0a:1a:fd:11:89:3e:9c:f5:a6:92:52:35:3f:1a:a8:39:70:
fd:39:aa:40:eb:6d:e4:86:39:f0:6d:0d:99:f0:c6:a8:4d:86:
7c:ef:8a:b4:40:33:b1:7b:92:cb:ab:22:93:bb:b1:c1:d3:13:
33:1a:54:a7:1b:09:e5:92:41:03:c0:45:7a:18:c3:ee:2e:67:
25:03:78:f3:e9:92:1e:e1:c9:50:2c:11:0f:94:74:1c:62:05:
5d:60:75:d6:73:32:ea:53:9e:58:35:b8:4d:09:dc:2d:34:30:
51:dd:c4:c5:2a:15:9f:ba:10:f6:1e:77:cb:7d:97:cc:10:8d:
d8:92:a0:c3:fc:f4:04:77:bb:b3:27:fe:f3:08:8a:cf:ac:38:
39:e6:2a:53:b9:38:56:3e:dc:c7:a9:6b:54:fc:c4:15:66:e9:
d8:11:93:9b:ef:ca:d0:d5:0e:f5:a9:4e:12:0d:0b:ed:12:a0:
13:13:25:c5:a2:ea:58:f4:db:1e:4e:24:78:f4:f2:cf:b5:5b:
99:37:09:78:8f:dc:fa:f8:77:71:5f:bc:12:3e:fb:1c:a6:3e:
75:93:ee:09:9b:54:28:d0:5a:68:9f:24:d1:ec:69:2a:25:2f:
68:08:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:26:52 2025 by rpki-client